1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Commit graph

6570 commits

Author SHA1 Message Date
gcp-cherry-pick-bot[bot]
52f1452ec6
Revert "chore: bump cleanup policies to v2beta1 (#8594)" (#8609) (#8610)
This reverts commit fff3ad047e.

Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 15:53:22 +00:00
gcp-cherry-pick-bot[bot]
da29e0277a
chore: bump cleanup policies to v2beta1 (#8594) (#8607)
* chore: bump cleanup policies to v2beta1



* chore: remove the support of v2alpha1 cleanup policies



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 12:22:38 +00:00
gcp-cherry-pick-bot[bot]
b087eb8f18
refactor: common remote authenticator for notary and cosign (#8494) (#8605)
* refactor: common remote authenticator for notary and cosign



* fix: add user agent



* refactor: move getGCRRemoteOption out of BuildGCRRemoteOption



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 09:40:06 +00:00
gcp-cherry-pick-bot[bot]
a8cdb5a23b
refactor: use GetKind() from the cleanup policy interface (#8565) (#8604)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 09:01:58 +00:00
gcp-cherry-pick-bot[bot]
12df4bf32d
fix: use v2beta1 of policy exceptions (#8587) (#8603)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 08:11:47 +00:00
gcp-cherry-pick-bot[bot]
a848dafe7f
Refactor fuzzing utils and add 3 fuzzers (#8555) (#8586)
* Refactor fuzzing utils and add 3 fuzzers



* Fix lint issues



* use latest go-jmespath



* Check layer size (#8552)

* fix excessive logs



* check fetched layer size



* check sig layer size



---------




* fix lint issues



---------

Signed-off-by: AdamKorcz <adam@adalogics.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-10-06 08:00:13 +08:00
gcp-cherry-pick-bot[bot]
65527e2b4e
chore: bump kubectl-validate (#8548) (#8551)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 22:39:47 +02:00
Charles-Edouard Brétéché
0ac6b0bf61
release: v1.11.0-beta.4 (#8549)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 19:25:28 +00:00
gcp-cherry-pick-bot[bot]
468692a5b6
chore: enable policy exceptions by default (#8545) (#8550)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 18:20:04 +00:00
gcp-cherry-pick-bot[bot]
7d3bb309a0
refactor: remove openapi package (#8538) (#8547)
* refactor: openapi package



* kubectl validate



* rm



* fix



* fix



* go mod



* fix vscode



---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 17:25:20 +00:00
gcp-cherry-pick-bot[bot]
44859d9c47
fix: make tuf feature in chart consistent with others (#8542) (#8546)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:50:31 +00:00
gcp-cherry-pick-bot[bot]
f8d7d622af
fix(helm): skip deployment replicas validation in non-int value (#8539) (#8543)
* fix(helm): skip deployment replicas validation in non-int value



* fix



---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:22:54 +02:00
gcp-cherry-pick-bot[bot]
febc017b52
refactor: get the last execution time from the cleanup policy interface (#8531) (#8541)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 07:29:39 +00:00
gcp-cherry-pick-bot[bot]
a9f93134d5
fix: remove cronjobs from cleanup controller rbac (#8529) (#8534)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 17:45:52 +02:00
gcp-cherry-pick-bot[bot]
7dfb538568
fix: creating ClusterAdmissionReports fails for resources with colon in name (#8530) (#8532)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 12:21:00 +00:00
gcp-cherry-pick-bot[bot]
e788bf0c95
feat: remove the creation of cronjobs in cleanup controller (#8526) (#8528)
* feat: remove the creation of cronjobs in cleanup controller



* fix: use lastExecutionTime instead of nextExecutionTime



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-26 10:49:33 +00:00
Charles-Edouard Brétéché
ed7b2ec36e
release: v1.11.0-beta.3 (#8527)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-25 20:04:26 +00:00
gcp-cherry-pick-bot[bot]
1cd5d2d733
fix: only fetch pub keys when tlogs and scts are not ignored (cherry-pick #8521) (#8524)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-25 09:00:21 +00:00
Charles-Edouard Brétéché
39b8a2f5c2
release: 1.11.0-beta.2 (#8517)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 14:37:40 +00:00
gcp-cherry-pick-bot[bot]
974f45b43a
fix: image cache panic and cleanup (#8512) (#8514)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:42:07 +00:00
gcp-cherry-pick-bot[bot]
84d68ee0f1
feat: add cli package to load policy exceptions (#8508) (#8513)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 10:44:52 +00:00
gcp-cherry-pick-bot[bot]
ff0b118968
fix: disables TUF by default (#8509) (#8510)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-22 11:55:50 +02:00
gcp-cherry-pick-bot[bot]
7d71e1af32
fix: make sure we don't modify reports not owned by kyverno (#8502) (#8504)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:06:35 +08:00
gcp-cherry-pick-bot[bot]
fb9d44e7f4
fix: return gvk when loading resource (#8501) (#8503)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 03:45:23 +00:00
gcp-cherry-pick-bot[bot]
b08931a071
feat: add resource load funcs in cli (#8499) (#8500)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 22:06:08 +00:00
gcp-cherry-pick-bot[bot]
81f2646963
fix: webhookTimeout flag not clear (#8493) (#8497)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 19:54:22 +02:00
gcp-cherry-pick-bot[bot]
c0bc8cf6ff
feat: improve assertion and error messages (#8489) (#8491)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-21 13:37:08 +00:00
gcp-cherry-pick-bot[bot]
a3d4c05a8b
feat: add cli resource loader package (#8488) (#8490)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 12:36:30 +00:00
gcp-cherry-pick-bot[bot]
8439623887
fix: deep copy before validaitng (#8483) (#8486)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 10:19:56 +00:00
gcp-cherry-pick-bot[bot]
9ce117c21f
feat: add a package to convert unstructured into typed (#8484) (#8487)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 11:47:49 +02:00
gcp-cherry-pick-bot[bot]
3e597d7ede
chore: fix release (#8482) (#8485)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 10:25:54 +02:00
gcp-cherry-pick-bot[bot]
3a8f1df20c
fix: check subjects func (#8470) (#8481)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 03:54:49 +00:00
gcp-cherry-pick-bot[bot]
7a49dc8820
fix: release archive name template (#8475) (#8477)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 00:18:48 +00:00
gcp-cherry-pick-bot[bot]
1bcacc66a8
fix: make free disk space action configurable (#8478) (#8479)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:46:57 +00:00
Charles-Edouard Brétéché
10361343c5
release: fix chart versions for 1.11.0-beta.1 (#8476)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:13:47 +00:00
gcp-cherry-pick-bot[bot]
00ccc2325b
fix: publish images workflow (#8473) (#8474)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 22:40:20 +00:00
gcp-cherry-pick-bot[bot]
07e75621d4
fix: release workflow (#8471) (#8472)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 20:20:41 +00:00
gcp-cherry-pick-bot[bot]
31ed587996
chore: free disk space before running jobs (#8468) (#8469)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 19:41:00 +02:00
Charles-Edouard Brétéché
9ce8d37656
release: v1.11.0-beta.1 (#8463)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 13:56:34 +00:00
gcp-cherry-pick-bot[bot]
eec78d8f61
fix: image verify cache test (#8462) (#8467)
* fix: image verify cache test



* feat: print err message



* feat: clear mock



* feat: defer clear mock



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 15:14:31 +02:00
gcp-cherry-pick-bot[bot]
21f1836b49
chore: add a required job to simplify branch protection (#8464) (#8465)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 11:56:49 +00:00
Charles-Edouard Brétéché
4f0e378a34
fix: custom-sigstore conformance job (#8459)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 09:12:02 +00:00
Charles-Edouard Brétéché
c1978d97a6
fix: use vap map in report aggregation (#8458)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 08:32:38 +00:00
dependabot[bot]
8ed197cb51
chore(deps): bump fluxcd/flux2 from 2.1.0 to 2.1.1 (#8457)
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](22cf986a79...026ab61ba7)

---
updated-dependencies:
- dependency-name: fluxcd/flux2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 07:33:32 +00:00
Charles-Edouard Brétéché
2444b7c670
refactor: add per resource reports aggregation (#8426)
* refactor: add per resource reports aggregation

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* added controller implementation

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* clean

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix kuttl tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix kuttl tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* vaps

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 14:51:32 +08:00
Vishal Choudhary
b4861015f0
feat: add check for digest mismatch (#8443)
* feat: add check for digest mismatch

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add unit test

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-20 05:29:20 +00:00
Charles-Edouard Brétéché
8a9d8f14d0
chore: bump a couple of deps (#8453)
* fix: use go 1.21 new packages

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* chore: bump a couple of deps

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 16:05:00 +00:00
Charles-Edouard Brétéché
fb90d0935d
fix: use go 1.21 new packages (#8452)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 12:06:53 +00:00
Charles-Edouard Brétéché
33dbdc9c5b
fix: linter (#8454)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 11:36:29 +00:00
Charles-Edouard Brétéché
6a43ec4bcf
chore: fix policies (#8449)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 10:28:58 +00:00